The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
http://www.securityfocus.com/bid/1033 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2000-04-10T04:00:00
Updated: 2024-08-08T05:05:54.113Z
Reserved: 2000-03-22T00:00:00
Link: CVE-2000-0201
Vulnrichment
No data.
NVD
Status : Modified
Published: 2000-03-01T05:00:00.000
Modified: 2024-11-20T23:31:57.090
Link: CVE-2000-0201
Redhat
No data.